Purported Amazon spam

Was sent a funny spam request from Amazon. My bank, huh? Interesting. Wonder who 'my bank' might be, seems like Amazon should know.

To 'confirm' my identy, I am supposed to click a link that resolves to:

http://www.amazon.com.270481.000cpom5.com/exec-obidos/signin.php?exec/obidos/flex-sign-in/ref=gw_hp_si/103-3177084-7567864?opt=a&page=recs/sign-in-secure.html&response=tg/recs/recs-post-login-dispatch/-/recs/pd_rw_gw_ur/ref=192930_1/3-3&ref=aa&emaddr=[one of my addresses].

The relevant part:

270481.000cpom5.com
which leads to pasta only knows, but somewhere creepy no doubt.

Technorati Tags: ,


Your bank has contacted us regarding some attempts of charges from your credit card via the Amazon system. We have reasons to believe that you changed your registration information or that someone else has unauthorized access to your Amazon account
Due to recent activity, including possible unauthorized listings
placed on your account, we will require a second confirmation
[redacted]
this matter further. Your account is not suspended, but if
in 48 hours after you receive this message your account is
not confirmed we reserve the right to suspend your Amazon
registration. If you received this notice and you are not
the authorized account holder, please be aware that it is in
violation of Amazon policy to represent oneself as another
Amazon user. Such action may also be in violation of local,
national, and/or international law. Amazon is committed to
assist law enforcement with any inquires related to attempts
to misappropriate personal information with the intent to
commit fraud or theft. Information will be provided at the
request of law enforcement agencies to ensure that
perpetrators are prosecuted to the full
extent of the law

This message and any files or documents attached may contain classified
information. It is intended only for the individual or entity named and others
authorized to receive it. If you are not the intended recipient or authorized to
receive it, you are hereby notified that any disclosure, copying, distribution
or taking any action in reliance on the contents of this information is strictly
prohibited and may be unlawful. If you have received this communication in
error, please notify us immediately then delete it from your system. Please also
note that transmission cannot be guaranteed to be secure or error-free.

Received: from ebay.com (216-10-34-206.static.t3voicenet.com [216.10.34.206])
by safeguard.xo.com (ConcentricHost(4.0) MX) with SMTP id D612018AC
for [me];
Wed, 22 Aug 2007 18:40:47 -0400 (EDT)
Received: (qmail 5846 invoked by alias); 22 Aug 2007 21:46:56 -0000
Date: 22 Aug 2007 21:46:56 -0000
Message-ID: 20070822214656.5844.qmail@ebay.com
From: “Amazon Payments” payments-messages@amazon.com


Looked up 216.10.34.206, and it points to some company in Texas:

whois 216.10.34.206
OrgName: T3 VoiceNet, LLC.
OrgID: TVL-8
Address: 601 N. Marienfeld
Address: Suite 104
City: Midland
StateProv: TX
PostalCode: 79705
Country: US
NetRange: 216.10.32.0 - 216.10.47.255
CIDR: 216.10.32.0/20
NetName: T3VOICENET
NetHandle: NET-216-10-32-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.T3WIRELESS.COM
NameServer: NS2.T3WIRELESS.COM
Comment:
RegDate: 2006-07-18
Updated: 2006-07-18
RAbuseHandle: CLM48-ARIN
RAbuseName: McGinnis, Chris Lynn
RAbusePhone: +1-432-620-0077
RAbuseEmail: chrism@t3voicenet.com
RAbuseHandle: TVH1-ARIN
RAbuseName: T3 VoiceNet Hostmaster
RAbusePhone: +1-432-620-0077
RAbuseEmail: hostmaster@t3wireless.com
RNOCHandle: TVH1-ARIN
RNOCName: T3 VoiceNet Hostmaster
RNOCPhone: +1-432-620-0077
RNOCEmail: hostmaster@t3wireless.com
RTechHandle: CLM48-ARIN
RTechName: McGinnis, Chris Lynn
RTechPhone: +1-432-620-0077
RTechEmail: chrism@t3voicenet.com
RTechHandle: TVH1-ARIN
RTechName: T3 VoiceNet Hostmaster
RTechPhone: +1-432-620-0077
RTechEmail: hostmaster@t3wireless.com
OrgAbuseHandle: MBL49-ARIN
OrgAbuseName: Lyssy, Matthew Blake
OrgAbusePhone: +1-432-620-0077
OrgAbuseEmail: mattlyssy@t3voicenet.com
OrgNOCHandle: MBL49-ARIN
OrgNOCName: Lyssy, Matthew Blake
OrgNOCPhone: +1-432-620-0077
OrgNOCEmail: mattlyssy@t3voicenet.com
OrgTechHandle: MBL49-ARIN
OrgTechName: Lyssy, Matthew Blake
OrgTechPhone: +1-432-620-0077
OrgTechEmail: mattlyssy@t3voicenet.com
# ARIN WHOIS database, last updated 2007-08-21 19:10

About this Entry

This page contains a single entry by Seth A. published on August 22, 2007 6:42 PM.

Virgin Megastores defunct was the previous entry in this blog.

Things Fall Apart is the next entry in this blog.

Find recent content on the main index or look in the archives to find all content.

Pages

Powered by Movable Type 4.37